Am Donnerstag, 12. Juni 2008 schrieb Dickson S. Guedes: > There is a TODO Item to allow pg_hba.conf to specify host names along > with IP addresses.
I'm a bit curious how useful in practice this would actually be. Obviously, you want to use host names to simplify the management of hosts, currently being done with IP addresses. But how widely useful is it really to authenticate a bunch of hosts in different ways? I'd say the standard case is localhost vs everything else. Or perhaps localhost vs LAN vs rest of the Internet. In neither of these cases , using host names helps much. We have people here concerned about security of DNS, rightly so. But what about relying on IP addresses or, by extension, MAC addresses for security; is that safe? So what are the use cases for having more than about 4 or 5 lines in pg_hba.conf, and how would the ability to use host names help there? -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers
